Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier: KbeUsVUnxBO+0x6tj9ijS6i8+aQkwcMQJ+zQhaFdB90=
Subject key identifier: 13:37:17:E1:58:1F:AB:AA:C3:A1:E2:78:5F:23:79:30:77:02:6F:78
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 019DCFABD0C0A8D00F646CCDF7D1BE858354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number: 0CDD
Signing time: Mon 27 Apr 2026 16:00:36 +0000
Manifest this update: Mon 27 Apr 2026 16:00:36 +0000
Manifest next update: Tue 28 Apr 2026 16:00:36 +0000
Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: 3sc0oTcO4RInwmX1xt/bLNxPtVOa4J+x4vzj5+jUU4o=)
2: rpScVUsryyaJ-F5kWegdG7uTvQI.roa (hash: 90JJSR9HRiVyxHT2c148KiZc/jsGWJOiBBV+kTkgs7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ab:d0:c0:a8:d0:0f:64:6c:cd:f7:d1:be:85:83:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Apr 27 16:00:36 2026 GMT
Not After : Apr 28 16:00:36 2026 GMT
Subject: CN=133717e1581fabaac3a1e2785f23793077026f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:48:de:39:be:1b:ac:6a:39:45:30:d3:86:
95:fe:44:b4:8d:ec:55:1f:df:a6:85:63:68:c1:f8:
98:7b:0d:c9:47:ca:73:3f:7a:d8:41:dc:4f:3d:ca:
50:52:f7:de:c2:a2:07:43:98:e9:f8:c1:a6:72:05:
c7:78:ad:e6:97:76:d0:76:55:e5:e1:13:0b:98:70:
73:43:69:35:a8:e1:0c:df:e1:88:ec:80:84:20:23:
0f:97:6c:f6:0a:ed:fd:8d:69:71:17:58:99:89:16:
af:27:0f:68:8c:f0:05:ef:9f:25:f1:e2:02:c9:b5:
dd:ab:18:9d:be:a8:2e:69:95:77:92:e2:13:9b:27:
d7:02:68:7f:a9:d3:e9:18:1a:8d:25:0d:3a:80:fb:
9c:d2:7c:13:f9:6e:80:27:6d:00:a8:8d:07:33:ad:
51:b8:dd:aa:f2:e7:4d:42:eb:52:05:3e:a3:b7:70:
b3:e8:ff:79:4a:02:26:ef:90:6b:83:05:83:8f:a6:
ac:13:8a:62:a6:be:50:2b:c3:45:ec:3c:0d:7c:b8:
8b:c2:ee:36:f0:97:2d:cb:aa:69:06:23:78:da:18:
0c:18:99:88:bf:1f:0f:bb:e5:5c:5f:5b:05:14:31:
6a:ed:a9:eb:fa:18:36:78:f1:87:eb:b0:09:25:38:
24:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:37:17:E1:58:1F:AB:AA:C3:A1:E2:78:5F:23:79:30:77:02:6F:78
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:62:61:bb:88:ad:3d:a1:6c:a1:80:76:c4:0e:15:19:41:6e:
85:6e:74:99:47:b9:f9:ff:61:fa:05:21:c2:1b:0e:40:57:c6:
8d:d6:02:90:da:20:50:31:37:c5:48:ce:3e:18:62:6d:72:69:
49:08:66:a9:e3:98:93:b0:cc:f2:41:55:9a:2a:0a:be:fa:b9:
cc:1b:5f:ce:57:73:ad:6d:94:2c:83:3f:29:6a:19:72:85:8f:
ff:79:07:04:a6:45:a6:73:14:71:97:b1:48:2f:24:9d:4b:81:
38:85:46:73:91:28:a3:92:d3:4d:70:e9:71:a1:4c:3d:ec:b8:
df:22:fe:29:af:af:ef:06:ee:18:94:e0:5c:dd:0c:15:f5:6b:
e6:0d:0c:97:48:7a:d1:60:31:bc:8c:e0:3f:02:7f:1e:46:6b:
c8:bb:f6:74:a8:6d:fe:d4:29:3f:b3:3f:19:67:98:c2:54:61:
0f:8c:df:32:7d:b2:05:31:4c:82:a0:48:02:5d:a5:8e:d3:d0:
7b:f2:e3:45:1f:e6:c1:6e:1f:bd:93:30:fc:9b:f7:e7:c2:fb:
50:8d:0e:95:b8:67:81:f4:b9:6c:f7:e0:cd:39:bb:60:a7:1b:
8c:dc:17:c2:0f:40:cc:0e:e5:fa:d4:f1:51:ea:ef:e2:a3:20:
4e:86:90:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Pq9DAqNAPZGzN99G+hYNUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMzI3MTExNzA3Njg5NTBmZGQ5ZjlkZWZlNjUxZjJkNWEx
MzEyYmUwHhcNMjYwNDI3MTYwMDM2WhcNMjYwNDI4MTYwMDM2WjAzMTEwLwYDVQQD
EygxMzM3MTdlMTU4MWZhYmFhYzNhMWUyNzg1ZjIzNzkzMDc3MDI2Zjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5NI3jm+G6xqOUUw04aV/kS0jexV
H9+mhWNowfiYew3JR8pzP3rYQdxPPcpQUvfewqIHQ5jp+MGmcgXHeK3ml3bQdlXl
4RMLmHBzQ2k1qOEM3+GI7ICEICMPl2z2Cu39jWlxF1iZiRavJw9ojPAF758l8eIC
ybXdqxidvqguaZV3kuITmyfXAmh/qdPpGBqNJQ06gPuc0nwT+W6AJ20AqI0HM61R
uN2q8udNQutSBT6jt3Cz6P95SgIm75BrgwWDj6asE4pipr5QK8NF7DwNfLiLwu42
8Jcty6ppBiN42hgMGJmIvx8Pu+VcX1sFFDFq7anr+hg2ePGH67AJJTgkkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBM3F+FYH6uqw6HieF8jeTB3Am94MB8GA1UdIwQY
MBaAFJMycRFwdolQ/dn53v5lHy1aExK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hZmNkNDAtMmE1MC00YzExLWJhNDct
ZTExZmZlYzg5Y2Q0LzEva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hZmNkNDAtMmE1MC00YzExLWJhNDctZTExZmZlYzg5Y2Q0
LzEva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWJhu4it
PaFsoYB2xA4VGUFuhW50mUe5+f9h+gUhwhsOQFfGjdYCkNogUDE3xUjOPhhibXJp
SQhmqeOYk7DM8kFVmioKvvq5zBtfzldzrW2ULIM/KWoZcoWP/3kHBKZFpnMUcZex
SC8knUuBOIVGc5Eoo5LTTXDpcaFMPey43yL+Ka+v7wbuGJTgXN0MFfVr5g0Ml0h6
0WAxvIzgPwJ/HkZryLv2dKht/tQpP7M/GWeYwlRhD4zfMn2yBTFMgqBIAl2ljtPQ
e/LjRR/mwW4fvZMw/Jv358L7UI0OlbhngfS5bPfgzTm7YKcbjNwXwg9AzA7l+tTx
Uerv4qMgToaQ/g==
-----END CERTIFICATE-----
Generated at Mon Apr 27 23:26:05 2026 by rpki-client